This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/eb837b-3ae5-4f60-829b-2b8038283017/1/z3Ty4UjiURHe63pt2W_vdLw1kS4.roa File: z3Ty4UjiURHe63pt2W_vdLw1kS4.roa (raw, json) Hash identifier: xMC0LvV4F23QNbKWyMDD9jVFxpb79rlvJmCJx7qmoRI= Subject key identifier: CF:74:F2:E1:48:E2:51:11:DE:EB:7A:6D:D9:6F:EF:74:BC:35:91:2E Certificate issuer: /CN=65a424cee2fdb0072b541438d913d26636a9b88b Certificate serial: 019B41AD378377A96802E012D1B5FB6E4B99 Authority key identifier: 65:A4:24:CE:E2:FD:B0:07:2B:54:14:38:D9:13:D2:66:36:A9:B8:8B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZaQkzuL9sAcrVBQ42RPSZjapuIs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/eb837b-3ae5-4f60-829b-2b8038283017/1/z3Ty4UjiURHe63pt2W_vdLw1kS4.roa Signing time: Sun 21 Dec 2025 16:10:29 +0000 ROA not before: Sun 21 Dec 2025 16:10:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 198731 IP address blocks: 5.1.32.0/21 maxlen: 21 81.173.40.0/23 maxlen: 23 85.184.224.0/22 maxlen: 22 185.45.28.0/22 maxlen: 22 185.64.232.0/22 maxlen: 22 2a00:bc40::/29 maxlen: 48 2a00:bc40::/40 maxlen: 40 2a00:bc40:b00::/40 maxlen: 40 2a00:bc40:c00::/40 maxlen: 40 2a00:bc40:f01::/48 maxlen: 48 2a00:bc40:f02::/48 maxlen: 48 2a00:bc40:f03::/48 maxlen: 48 2a00:bc40:f04::/48 maxlen: 48 2a00:bc40:f0e::/48 maxlen: 48 2a00:bc40:1000::/36 maxlen: 36 2a00:bc40:2000::/36 maxlen: 36 2a00:bc40:3000::/36 maxlen: 36 2a00:bc40:4000::/36 maxlen: 36 2a00:bc40:e000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/eb837b-3ae5-4f60-829b-2b8038283017/1/ZaQkzuL9sAcrVBQ42RPSZjapuIs.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/eb837b-3ae5-4f60-829b-2b8038283017/1/ZaQkzuL9sAcrVBQ42RPSZjapuIs.mft rsync://rpki.ripe.net/repository/DEFAULT/ZaQkzuL9sAcrVBQ42RPSZjapuIs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 03:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:ad:37:83:77:a9:68:02:e0:12:d1:b5:fb:6e:4b:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65a424cee2fdb0072b541438d913d26636a9b88b Validity Not Before: Dec 21 16:10:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=cf74f2e148e25111deeb7a6dd96fef74bc35912e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:f4:fd:85:e3:f5:32:69:23:35:d3:13:75:3c: 0c:a0:8b:f3:2e:ff:a4:49:7b:1a:ff:4e:83:72:f9: a7:d6:ef:e0:19:6d:4a:ee:76:c9:e2:93:2c:34:7e: 7d:ba:a8:85:2c:71:fa:3c:6d:e7:79:4b:2c:a4:bb: ab:19:31:6c:cf:cc:a1:b0:01:10:ba:82:f1:a5:5e: 07:ce:63:9e:6d:d7:41:f5:9e:dd:7d:d0:0b:56:3c: c5:30:8e:6a:f8:ec:90:99:de:6e:8e:cd:fb:d5:de: 27:cf:c7:69:27:87:9b:a0:c9:13:5a:29:78:b0:55: 1d:3f:ee:42:be:15:39:16:6d:d6:cc:2a:9e:34:29: 55:44:1e:08:21:62:41:a3:3b:4f:8c:40:90:f9:e4: e4:f8:37:8e:d3:f8:3e:4c:96:a2:4a:66:d5:c2:5a: 82:a1:56:3f:f8:7a:e0:17:9a:e8:a2:fd:08:cd:6b: 1c:eb:74:5c:f3:ce:01:76:6d:13:16:1a:75:88:9b: 3f:3e:0f:63:b3:17:61:18:28:29:c4:0d:34:3e:93: 41:76:32:a8:a9:b9:2b:45:1e:f3:b4:e2:c1:c5:d1: 7b:96:63:b7:d4:b3:b8:40:29:f6:84:36:3c:02:58: f4:01:18:a6:03:58:65:5b:cd:4a:9d:90:a7:5e:20: a1:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:74:F2:E1:48:E2:51:11:DE:EB:7A:6D:D9:6F:EF:74:BC:35:91:2E X509v3 Authority Key Identifier: keyid:65:A4:24:CE:E2:FD:B0:07:2B:54:14:38:D9:13:D2:66:36:A9:B8:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZaQkzuL9sAcrVBQ42RPSZjapuIs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/eb837b-3ae5-4f60-829b-2b8038283017/1/z3Ty4UjiURHe63pt2W_vdLw1kS4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/eb837b-3ae5-4f60-829b-2b8038283017/1/ZaQkzuL9sAcrVBQ42RPSZjapuIs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.1.32.0/21 81.173.40.0/23 85.184.224.0/22 185.45.28.0/22 185.64.232.0/22 IPv6: 2a00:bc40::/29 Signature Algorithm: sha256WithRSAEncryption 07:ab:70:91:5d:ec:03:42:19:fc:aa:af:91:5a:a3:fb:aa:1f: b1:0a:bc:8d:1a:bb:22:83:d2:2f:86:12:0b:cc:45:b8:fd:d5: 0f:39:1b:a0:86:c2:69:f0:0d:7c:8d:d5:ce:0e:55:6b:f5:51: 66:2d:e5:e6:5b:1c:88:bb:de:2a:ca:5e:bf:04:4e:fb:fb:35: d1:46:bb:5b:74:a9:cd:e8:90:1d:59:0d:86:30:26:28:f4:09: 98:4a:0a:25:86:84:c4:01:f5:41:d5:07:36:16:8f:d1:12:c6: f3:5d:ad:ee:75:60:00:09:24:ab:00:17:7e:05:80:99:18:09: 15:89:f6:c9:86:13:bd:84:07:e6:58:c4:af:ee:bd:7f:2f:e1: 19:7f:67:b0:c2:20:b7:57:af:d6:8e:ed:e8:00:df:38:ab:dc: 88:33:b9:34:c9:a7:aa:67:4d:91:91:f4:30:25:47:28:b3:a1: 09:3d:79:be:08:1e:e8:5f:07:b5:be:21:8c:8e:71:6d:b8:cd: dd:c7:ac:f9:cb:3e:9a:ad:d7:0f:3d:b5:7c:5b:13:50:94:69: 04:1b:56:52:96:ac:f4:32:ff:4e:f7:68:39:0f:1a:5f:af:a3: 67:7c:23:89:ce:cb:e4:42:e5:fd:9e:d0:6d:8f:cf:25:aa:73: 4f:c7:fb:d4 -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgISAZtBrTeDd6loAuAS0bX7bkuZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1YTQyNGNlZTJmZGIwMDcyYjU0MTQzOGQ5MTNkMjY2MzZh OWI4OGIwHhcNMjUxMjIxMTYxMDI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZjc0ZjJlMTQ4ZTI1MTExZGVlYjdhNmRkOTZmZWY3NGJjMzU5MTJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3vT9heP1MmkjNdMTdTwMoIvzLv+k SXsa/06Dcvmn1u/gGW1K7nbJ4pMsNH59uqiFLHH6PG3neUsspLurGTFsz8yhsAEQ uoLxpV4HzmOebddB9Z7dfdALVjzFMI5q+OyQmd5ujs371d4nz8dpJ4eboMkTWil4 sFUdP+5CvhU5Fm3WzCqeNClVRB4IIWJBoztPjECQ+eTk+DeO0/g+TJaiSmbVwlqC oVY/+HrgF5roov0IzWsc63Rc884Bdm0TFhp1iJs/Pg9jsxdhGCgpxA00PpNBdjKo qbkrRR7ztOLBxdF7lmO31LO4QCn2hDY8Alj0ARimA1hlW81KnZCnXiCh7wIDAQAB o4ICMDCCAiwwHQYDVR0OBBYEFM908uFI4lER3ut6bdlv73S8NZEuMB8GA1UdIwQY MBaAFGWkJM7i/bAHK1QUONkT0mY2qbiLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmFRa3p1TDlzQWNyVkJRNDJSUFNaamFwdUlzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi9lYjgzN2ItM2FlNS00ZjYwLTgyOWIt MmI4MDM4MjgzMDE3LzEvejNUeTRVamlVUkhlNjNwdDJXX3ZkTHcxa1M0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi9lYjgzN2ItM2FlNS00ZjYwLTgyOWItMmI4MDM4MjgzMDE3 LzEvWmFRa3p1TDlzQWNyVkJRNDJSUFNaamFwdUlzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEYGCCsGAQUFBwEHAQH/BDcwNTAkBAIAATAeAwQDBQEgAwQB Ua0oAwQCVbjgAwQCuS0cAwQCuUDoMA0EAgACMAcDBQMqALxAMA0GCSqGSIb3DQEB CwUAA4IBAQAHq3CRXewDQhn8qq+RWqP7qh+xCryNGrsig9IvhhILzEW4/dUPORug hsJp8A18jdXODlVr9VFmLeXmWxyIu94qyl6/BE77+zXRRrtbdKnN6JAdWQ2GMCYo 9AmYSgolhoTEAfVB1Qc2Fo/REsbzXa3udWAACSSrABd+BYCZGAkVifbJhhO9hAfm WMSv7r1/L+EZf2ewwiC3V6/Wju3oAN84q9yIM7k0yaeqZ02RkfQwJUcos6EJPXm+ CB7oXwe1viGMjnFtuM3dx6z5yz6ardcPPbV8WxNQlGkEG1ZSlqz0Mv9O92g5Dxpf r6NnfCOJzsvkQuX9ntBtj88lqnNPx/vU -----END CERTIFICATE-----Generated at Thu Dec 25 11:13:26 2025 by rpki-client